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Amendments to the Claims : 

The listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims : 

Claim 1. (Currently Amended) A method of improving the security of 
computer communications over a connecting network which connects a plurality 
of user domains, said method comprising the following steps that are carried out 
before a data packet enters the connecting network from a user domain; [[of:]] 

a) tagging the data packet from a user domain with a security level 
marking, and 

b) appending the tagged data packet with a string formed from a 
check-sum made over the data packet and security level marking tag to form a 
datagram. 

Claim 2. (Currently Amended) A method as claimed in Claim 1, 
further comprising the further following steps, which are carried out as the 
datagram attempts to enter a second user domain; [[, of:]] 



Page 2 of 9 



Serial No. 10/529,303 
Amendment Dated: April 27, 2007 
Reply to Office Action Mailed: December 27, 2006 
Attorney Docket No. 038665.5606 1US 

c) verifying the string in the received datagram matches a string 
calculated over the received data packet and security level marking tag, and 

d) verifying the received security level marking tag matches the 
security level of the second user domain. 

Claim 3. (Previously Presented) A method as claimed in Claim 1, 
comprising the further step of encrypting each datagram before entry into the 
wide area network. 

Claim 4. (Current Amended) A method as claimed in Claim [[3,]] JL 
wherein datagrams from more than one user domain are encrypted by the same 
cryptograph. 

Claim 5. (Previously Presented) A method as claimed in Claim 4, 
wherein the check-sum is a one-way hash function. 

Claim 6. (Original) A method as claimed in Claim 5, wherein the 
one-way hash function is SHA-1. 

Claim 7. (Previously Presented) A method as claimed in Claim 6, 
further comprising the step of recording any mismatch of check-sum or security 
level marking tag. 
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Claim 8. (Previously Presented) A domain separator for improving 
the security of computer communications over a connecting network arranged to 
carry out the method according to Claim 7. 

Claim 9. (Original) A domain separator as claimed in Claim 8, 
wherein the user domain security level marking is set by a physical switch on 
the device. 

Claim 10. (Previously Presented) A method as claimed in Claim 1, 
wherein the check-sum is a one-way hash function. 

Claim 11. (Previously Presented) A method as claimed in Claim 10, 
wherein the one-way hash function is SHA-1. 

Claim 12. (Previously Presented) A method as claimed in Claim 11, 
further comprising the step of recording any mismatch of check-sum or security 
level marking tag. 

Claim 13. (Previously Presented) A domain separator for improving the 
security of computer communications over a connecting network arranged to 
carry out the method according to Claim 12. 
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Claim 14. (Previously Presented) A domain separator as claimed in 
Claim 13, wherein the user domain security level marking is set by a physical 
switch on the device. 

Claim 15. (Previously Presented) A method as claimed in Claim 2, 
further comprising the step of recording any mismatch of check-sum or security 
level marking tag. 

Claim 16. (Previously Presented) A domain separator for improving the 
security of computer communications over a connecting network arranged to 
carry out the method according to Claim 15. 

Claim 17. (New) A domain separator as claimed in Claim 16, wherein 
the user domain security level marking is set by a physical switch on the device. 
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